No More EndBanner

I hate this banner...

#Define ADR_NoEndBanner 0x8D62F8 //12-8

Pattern to always find this addy

Code:

DWORD NoEndBanner = FindPattern((PBYTE)"\x68\xF8\x00\x8D\x00\x50\xFF\x15\xF0\x00\x00\x00\x83\xC4\x0C", "xx?xxxxxx??xxxx", 1, true);

Code to modify text buffer (tnx @AeroMan More info)

Code:

void WriteMemory(void *adr, void *ptr, int size)
{
	DWORD dwback;
	VirtualProtect(adr, size, PAGE_EXECUTE_READWRITE, &dwback);
	memcpy(adr, ptr, size);
	VirtualProtect(adr, size, dwback, &dwback);
}

Change the Banner to something random

Code:

WriteMemory((void *)ADR_NoEndBanner, (PBYTE)"http://www.mpgh.net", 20);

Now you never have to see it again :3

Good Job Bro! how about if i change it to WriteMemory((void *)ADR_NoEndBanner, (PBYTE)"http://www.mpgh.net", 20);

Originally Posted by WhiteHat PH

Good Job Bro! how about if i change it to WriteMemory((void *)ADR_NoEndBanner, (PBYTE)"http://www.mpgh.net", 20);

Great idea

Great share.

naice : - ).

good job, thanks for sharing

Why You Hate It

Remember not to override the original buffer

Goodjob!

@AeroMan So what is the orriginal buffer ? if we use 20 what happen ?

Originally Posted by WhiteHat PH

@AeroMan So what is the orriginal buffer ? if we use 20 what happen ?

each byte has a particular function, if your original buffer is for example: http://www.mpgh.net <- that's 19 bytes.
If you then overwrite this function with a text for example: http://ImaginaryTextExample.com <- which is obviously alot longer you are going to overwrite more bytes, meaning you will overwrite another function which may result in a crash.

Thank for the great info Sir

No More EndBanner

Post a Reply

Similar Threads

Tags for this Thread